Page MenuHomePhabricator
Create Task
Maniphest T215178

Self-hosted SonarQube
Closed, DeclinedPublic
Actions

Description

At some point, if we want this integration to move beyond proof-of-concept, we'll need to install and maintain our own SonarQube instance.

Our (Code-Health-Metrics) current thinking is:

  1. continue to use sonarcloud.io for per-patch analysis and on postmerge
  2. also on postmerge, analyze patches with our self-hosted SonarQube instance

That way, we will maintain control of our historical data in our self-hosted instance. We can't use the self-hosted instance for per-patch analysis without paying a lot of money for a license.

Related Objects

Event Timeline

kostajh created this task.Feb 4 2019, 4:21 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 4 2019, 4:21 PM
zeljkofilipin subscribed.Feb 13 2019, 10:15 AM
kostajh added a comment.May 14 2019, 2:08 PM

AFAIK, tools isn't a good place for this since the home directories are not secure. Is there another option here?

kostajh added a subscriber: Ladsgroup.Jun 4 2019, 1:35 PM

Note that we'll want to use Postgres https://community.sonarsource.com/t/end-of-life-of-mysql-support/8667 (h/t @Ladsgroup )

kostajh renamed this task from Install SonarQube on tools.wmflabs.org to Self-hosted SonarQube.Jun 4 2019, 1:38 PM
kostajh updated the task description. (Show Details)
kostajh updated the task description. (Show Details)
Ladsgroup added a comment.Jun 4 2019, 8:52 PM

I think having one or several (HA) VPS nodes is way better than having them in toolforge. We have more control over the node. I might be able to setup something quickly. Is there a help on how to setup a standalone service?

kostajh added a comment.Jun 11 2019, 5:05 PM

I think having one or several (HA) VPS nodes is way better than having them in toolforge. We have more control over the node. I might be able to setup something quickly. Is there a help on how to setup a standalone service?

@Ladsgroup I would start here https://docs.sonarqube.org/latest/setup/overview, does that help?

zeljkofilipin added a project: User-zeljkofilipin.Jul 1 2019, 4:19 PM
zeljkofilipin moved this task from Backlog 🪒 to Deep work 🌊 on the User-zeljkofilipin board.
zeljkofilipin moved this task from Deep work 🌊 to Q4 👔 on the User-zeljkofilipin board.Jul 11 2019, 2:22 PM
zeljkofilipin moved this task from Q4 👔 to Backlog 🪒 on the User-zeljkofilipin board.Jul 16 2019, 1:06 PM
Don-vip subscribed.Jun 1 2021, 11:40 PM
kostajh closed this task as Declined.Jul 5 2021, 9:23 AM
kostajh added a subscriber: Jrbranaa.

It's unclear to me if we actually want this, so I am declining. We would need someone (or a team) to take on installation and maintenance, and maintaining a dual setup (sonarcloud.io for patch review, sonar.wikimedia.org for archives) would definitely be confusing. We'd also need to rewire CI configuration to publish to the self hosted instance. cc @Jrbranaa

Don-vip added a comment.Jul 5 2021, 9:49 AM

@kostajh @Jrbranaa on a related topic, do you know if/how we can/should use sonarcloud.io for Toolforge-hosted projects? (T285622)

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL